Known vulnerabilities in Django

Software: Django
Software CPE: cpe:2.3:a:django_software_foundation:django:*:*:*:*:*:*:*:*
Total vulnerabilities: 137
Public exploits: 12
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Django Django is affected by 137 known vulnerabilities: 19 high, 82 medium, 36 low Critical High Medium Low

Vulnerabilities (137)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU140942 - Improper input validation
CVE-2026-15307
CWE-20 Low
No
No
5.2.17, 6.0.8 05.08.2026 SB2026080503
SB2026080601
#VU140943 - Resource exhaustion
CVE-2026-15337
CWE-400 Medium
No
No
5.2.17, 6.0.8 05.08.2026 SB2026080503
SB2026080601
#VU140944 - Uncontrolled Recursion
CVE-2026-15830
CWE-674 Medium
No
No
5.2.17, 6.0.8 05.08.2026 SB2026080503
SB2026080601
#VU140945 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-15920
CWE-79 Low
No
No
5.2.17, 6.0.8 05.08.2026 SB2026080503
SB2026080601
#VU137028 - Use of Web Browser Cache Containing Sensitive Information
CVE-2026-48588
CWE-525 Medium
No
No
5.2.16, 6.0.7 07.07.2026 SB2026070771
SB2026071012
SB2026071707
and 6 more
#VU137029 - Out-of-bounds read
CVE-2026-53877
CWE-125 Low
No
No
5.2.16, 6.0.7 07.07.2026 SB2026070771
SB2026071012
SB2026071707
and 6 more
#VU137030 - Improper input validation
CVE-2026-53878
CWE-20 Low
No
No
5.2.16, 6.0.7 07.07.2026 SB2026070771
SB2026071707
SB2026071708
#VU133399 - Incomplete Comparison with Missing Factors
CVE-2026-48587
CWE-1023 Low
No
No
5.2.15, 6.0.6 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU133391 - Use of Cache Containing Sensitive Information
CVE-2026-35193
CWE-524 Low
No
No
5.2.15, 6.0.6 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU133367 - Improper Handling of Case Sensitivity
CVE-2026-8404
CWE-178 Low
No
No
5.2.15, 6.0.6 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU133364 - Cleartext Transmission of Sensitive Information
CVE-2026-7666
CWE-319 Low
No
No
5.2.15, 6.0.6 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU133360 - Improper Verification of Cryptographic Signature
CVE-2026-6873
CWE-347 Low
No
No
5.2.15, 6.0.6 04.06.2026 SB20260604100
SB2026060570
SB2026060571
and 5 more
#VU130190 - Improper input validation
CVE-2026-5766
CWE-20 Medium
No
No
5.2.14, 6.0.5 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU130191 - Session Fixation
CVE-2026-35192
CWE-384 Medium
No
No
5.2.14, 6.0.5 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 10 more
#VU130192 - Use of Web Browser Cache Containing Sensitive Information
CVE-2026-6907
CWE-525 Medium
No
No
5.2.14, 6.0.5 05.05.2026 SB20260505111
SB2026050601
SB20260507300
and 9 more
#VU125093 - Improper input validation
CVE-2026-3902
CWE-20 Medium
No
No
4.2.30, 5.2.13, 6.0.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 11 more
#VU125094 - Improper Access Control
CVE-2026-4277
CWE-284 Low
No
No
4.2.30, 5.2.13, 6.0.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125095 - Improper Access Control
CVE-2026-4292
CWE-284 Low
No
No
4.2.30, 5.2.13, 6.0.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125096 - Resource exhaustion
CVE-2026-33033
CWE-400 Medium
No
No
4.2.30, 5.2.13, 6.0.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 12 more
#VU125097 - Improper input validation
CVE-2026-33034
CWE-20 Medium
No
No
4.2.30, 5.2.13, 6.0.4 07.04.2026 SB20260407104
SB20260407113
SB20260409114
and 11 more


Showing elements 1 - 20 out of 137